Bug #3148
[cura-binary-data] not built from source
Status:
fixed
Priority:
freedom issue
Assignee:
% Done:
0%
Description
Binaries may not be reproducible and it may be extremely difficult to tell if they have been made malicious.
History
Updated by GNUtoo about 2 years ago
- Priority changed from bug to freedom issue
- Status changed from unconfirmed to confirmed
Good catch.
While the license is GPLv3 or AGPLv3 it's a big issue if we redistribute the packages without redistributing the complete and corresponding source code.
So it's indeed probably better to remove it.
Updated by GNUtoo about 2 years ago
- Status changed from confirmed to fixed
It should now be fixed: https://git.parabola.nu/blacklist.git/commit/?id=33c48febacfdb1dd43c24a581f847ee1ca4632d9
Denis.
Updated by gap about 2 years ago
I think this bug should go upstream; the code is libre and can be built from source.
https://github.com/Ultimaker/cura-binary-data/blob/master/cura/resources/firmware/Attribution.txt
https://github.com/Ultimaker/Marlin